Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

eaf29828e3...cs.exe

windows7-x64

9

eaf29828e3...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaf29828e30926e47fc35b590f804050_NeikiAnalytics.exe

  • Size

    29KB

  • Sample

    240606-xhldvabc94

  • MD5

    eaf29828e30926e47fc35b590f804050

  • SHA1

    e82f4cdfc80dd31125d50f4fc260c7e3e7160c53

  • SHA256

    21cee6ad9f6649746abb2a93507baf348dca80ab184f83e461e80c24d7ba328d

  • SHA512

    a81307b6531b937feabd0b24d5bdd55b50fc36ece54f7a71653c086347825d65249db3def2b266b487f94d0b903d168eb2db78ef87eb95ed16eb6834b7a25ceb

  • SSDEEP

    192:tACUADIY0Br5xjL/FAgAQmP1oynLb22vuN6GnN6G0JN:GBt7Br5xjL9AgA71FbhvuNBNqJN

Score
9/10
ransomware

Malware Config

Targets

    • Target

      eaf29828e30926e47fc35b590f804050_NeikiAnalytics.exe

    • Size

      29KB

    • MD5

      eaf29828e30926e47fc35b590f804050

    • SHA1

      e82f4cdfc80dd31125d50f4fc260c7e3e7160c53

    • SHA256

      21cee6ad9f6649746abb2a93507baf348dca80ab184f83e461e80c24d7ba328d

    • SHA512

      a81307b6531b937feabd0b24d5bdd55b50fc36ece54f7a71653c086347825d65249db3def2b266b487f94d0b903d168eb2db78ef87eb95ed16eb6834b7a25ceb

    • SSDEEP

      192:tACUADIY0Br5xjL/FAgAQmP1oynLb22vuN6GnN6G0JN:GBt7Br5xjL9AgA71FbhvuNBNqJN

    Score
    9/10
    ransomware

    • Renames multiple (3055) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks